Configures authentication for all REST endpoints in the Server.
Installs Ktor authentication providers (for example bearer token extraction).
Called when an endpoint does not define its own auth block. Override to set a default policy.
Called as a last resort after all other auth blocks fail. Override to customize error behavior.